CVE-2026-4626

CVE-2026-4626 affects the projectworlds Lawyer Management System 1.0. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the Description argument in the /lawyer_booking.php endpoint (also referred to as /lawyer booking.php in other sources). The issue is exploitable ...